Remote access without dedicated (static) ip?

Your issue will probably be that your provider uses CGNAT so you won’t get a routable IP address. DuckDNS does not require a static ip.

Test what kind of address you get. I have a 4g failover connected to my router and thst get a routable ip.

In theory my IP is also dynamic but it changes only when I get a new modem or when my provider changes its network (once in 4 years). So practically I have a rather static IP. Does this also apply to your situation or do you get a new IP every day?

In the documentation of the router it states that it supports Dynamic DNS client’s like No-IP, DNS Master and DynDNS.
If you set that up you should be able to use that to get around the dynamic IP.

Here is what I can find.

And here is IP 3 days ago

04

Not sure what exactly I should find out

It changes at least 1 time per 3 days as you can see from comment above
however thank you for advice

Maybe you can configure the DNS sensor and a Telegram notification. It can send you a notification when your external IP changes. Then you always know what IP to connect to.

How can I be sure about CGnat? Support has no idea what I am talking about

I tried to make remote access with duckdns as I did with first HA, but that did not work. I just can not connect to url (does not load). Tried from local network and out of it.

I searched info anout yota.ru and according to my wife that is russian she say that it seems thst they use cgnat.

Oh, that mean I can not use duckdns, right?
Say thank you to your wife
And of course thank you for your time

To work across CGNAT set up a vpn connection from your PC to a VPS, you can then access via this end point. It’s more work but I’ve done this successfully with my failover 4G LTE modem on both personal VPS and with commercial VPN provider (airvpn).
I prefer to create the tunnel on my Pc rather than modem (Sierra es450) as it has greater CPU power and performance is less compromised.

Speaking about vpn, should I configure it for each device?

I found that in router settings. Could you help a bit more. What should I do after configuring No-IP or DynDNS on router? Can I access through it? Will it be encrypted?

Since you are behind a CGNAT you cannot do anything with the dynamic DNS client in your router. You have to subscribe for a VPS (Virtual private server). Then setup a VPN connection from your home to the VPS so you can access your home network through the VPS.
Maybe you can use a NAS to setup this kind of functionality (like QNAP Cloud). This could be easier than a VPS.

I understand that tor also works with cgnat.

The problem is the connection from the HA instance is not getting a routable IP address so you can’t use duckdns or anything else so that you can connect in remotely. How does Tor circumvent that?

My ISP is moving over to CGNAT and although not mandatory right now I see the writing on the wall. They have simultaneously implemented IPv6 and I have a duckdns IPv6 only domain and finally got that working nicely (using Caddy) for Hass.io. Now I’m looking at the other stuff I usually use a VPN for external access and will be securing them with username and password and putting them behind Caddy as well. Then if I end up moving to CGNAT I won’t care anymore.

To the OP, in Australia, NONE of our mobile providers have routable IPv4 addresses - they are all CGNAT unless you are on a business plan so the normal methods like duckdns don’t help you much. It’s not that you can’t get a static IP address that is the problem - it’s that you most likely can’t get a routable IP address so you can’t set it up with duckdns and letsencrypt like you would if you were on a non-cgnatted connection.

1 Like

That’s pretty cool…

Yeah I always thought tor was primarily some hard to set up system that you only needed if you wore a tinfoil hat or had a prediliction for child porn (or buying hard drugs over the internet) so I have never bothered. However this actually seems useful.

1 Like

Ditto on the tinfoil hat set…